The `050` should be clear, that sets read and execute bits for the group the first `6` sets the set-user-ID and set-group-ID bits (see `man 2 chmod`). Effectively this means that executing `container-extractor` can only be done by `root` or members of the group `hadoop` and that the executable runs with effective `uid` being `root` and effective `gid` being `hadoop`.